Security advisories

high2023-06-29

CVE-2020-26708-requests-xml XML External Entity Injection vulnerability

View chart →

erinxocon/requests-xml · GHSA-ccrc-9x59-3vc4

medium2023-06-29

CVE-2023-36617-URI gem has ReDoS vulnerability

View chart →

ruby/uri · GHSA-hww2-5g85-429m

medium2023-06-29

CVE-2023-28362-Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to

View chart →

rails/rails · GHSA-4g8v-vg43-wpgf

low2023-06-29

SafeURL-Python's hostname blocklist does not block FQDNs

View chart →

includesecurity/safeurl-python · GHSA-373w-rj84-pv6x

high2023-06-29

CVE-2023-22886-Apache Airflow JDBC Provider Improper Input Validation vulnerability

View chart →

apache/airflow · GHSA-mm87-c3x2-6f89

medium2023-06-28

CVE-2023-35933-OpenFGA vulnerable to denial of service due to circular relationship

View chart →

openfga/openfga · GHSA-hr9r-8phq-5x8j

low2023-06-28

CVE-2023-35930-SpiceDB's LookupResources may return partial results

View chart →

authzed/spicedb · GHSA-m54h-5x5f-5m6r

medium2023-06-28

CVE-2023-34099-Shopware improper mail validation vulnerability

View chart →

shopware5/shopware · GHSA-gh66-fp7j-98v5

medium2023-06-28

CVE-2023-34098-Shopware dependency configuration exposed

View chart →

shopware5/shopware · GHSA-q97c-2mh3-pgw9

low2023-06-28

CVE-2023-3445-Spina Cross-site Scripting vulnerability

View chart →

spinacms/spina · GHSA-97wh-6hmj-g8j9

high2023-06-28

CVE-2023-26134-git-commit-info vulnerable to Command Injection

View chart →

jpeer264/node-git-commit-info · GHSA-h42j-mrmp-9369

high2023-06-27

CVE-2023-3432-PlantUML Server-Side Request Forgery vulnerability

View chart →

plantuml/plantuml · GHSA-ff3m-68vj-h86p

medium2023-06-27

CVE-2023-3431-PlantUML Improper Access Control vulnerability

View chart →

plantuml/plantuml · GHSA-p2mf-q26j-3xmh

medium2023-06-27

CVE-2023-35798-Apache Airflow ODBC Provider, Apache Airflow MSSQL Provider Improper Input Validation vulnerability

View chart →

apache/airflow · GHSA-q57w-826p-46jr

high2023-06-27

CVE-2023-34395-Apache Airflow ODBC Provider Argument Injection vulnerability

View chart →

apache/airflow · GHSA-9766-v29c-4vm7

high2023-06-26

CVE-2023-40586-Coraza has potential denial of service vulnerability

View chart →

corazawaf/coraza · GHSA-c2pj-v37r-2p6h

critical2023-06-23

fief-server Server-Side Template Injection vulnerability

View chart →

fief-dev/fief · GHSA-hj8m-9fhf-v7jp

high2023-06-23

CVE-2023-35932-jcvi vulnerable to Configuration Injection due to unsanitized user input

View chart →

tanghaibao/jcvi · GHSA-x49m-3cw7-gq5q

high2023-06-23

CVE-2023-33141-YARP Denial of Service Vulnerability

View chart →

microsoft/reverse-proxy · GHSA-jrjw-qgr2-wfcg

medium2023-06-23

CVE-2023-3304-Admidio Improper Access Control vulnerability

View chart →

admidio/admidio · GHSA-x3m2-3pwj-8fj4